tfjg-rjgu-eeti-zjti-ordg-rfgj[.]netlify[.]app

Analysis of the domain tfjg-rjgu-eeti-zjti-ordg-rfgj.netlify.app, conducted on July 24, 2026, indicates it is a high-risk phishing domain currently offline. The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, and is flagged by 15 of 95 security vendors on VirusTotal. Infrastructure analysis reveals the domain is hosted on Netlify infrastructure, resolving to the IPv6 address 2a05:d014:58f:6200::258, located in Germany under Amazon.com, Inc. (AS16509).

The domain returns an HTTP 404 status with the page title 'Site not found,' suggesting it may have been taken down or was never fully deployed. The SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), a legitimate certificate authority, which does not mitigate the domain's malicious classification. No nameservers are currently associated with the domain, and registration details point to Netlify as the hosting provider.

The exact content or target of the phishing attempt is not confirmed, as the page title provides no indication of a specific brand or service being mimicked. Defenders should treat this domain as malicious, block access at the network level, and monitor for related indicators of compromise. Given its offline status, further analysis may be limited, but historical logs should be reviewed for any prior connections to this domain.